Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/3c1fed-4546-4bff-80d1-99c741a3a312/1/i90UJnygnMoHmH6ySP91hWkRpHQ.mft
File: i90UJnygnMoHmH6ySP91hWkRpHQ.mft (raw, json)
Hash identifier: G4okDi/2w6eM/26C3cQNC7jg5hHa2NeoJyKsBaYDXsI=
Subject key identifier: 05:EC:56:0C:12:BC:C2:B9:73:2F:27:A7:F7:14:61:8A:C8:E4:97:97
Authority key identifier: 8B:DD:14:26:7C:A0:9C:CA:07:98:7E:B2:48:FF:75:85:69:11:A4:74
Certificate issuer: /CN=8bdd14267ca09cca07987eb248ff75856911a474
Certificate serial: 0195E046D6A688D9A07D4FB0D2A7457CC3E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i90UJnygnMoHmH6ySP91hWkRpHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/3c1fed-4546-4bff-80d1-99c741a3a312/1/i90UJnygnMoHmH6ySP91hWkRpHQ.mft
Manifest number: 0895
Signing time: Sat 29 Mar 2025 05:01:33 +0000
Manifest this update: Sat 29 Mar 2025 05:01:33 +0000
Manifest next update: Sun 30 Mar 2025 05:01:33 +0000
Files and hashes: 1: i90UJnygnMoHmH6ySP91hWkRpHQ.crl (hash: Scj+SqlkvmS/XVmDXYuFkrdYBtn1IE96IJfACIvPZBA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:d6:a6:88:d9:a0:7d:4f:b0:d2:a7:45:7c:c3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdd14267ca09cca07987eb248ff75856911a474
Validity
Not Before: Mar 29 05:01:33 2025 GMT
Not After : Mar 30 05:01:33 2025 GMT
Subject: CN=05ec560c12bcc2b9732f27a7f714618ac8e49797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0e:a5:3a:c8:45:0e:75:ee:03:7c:c0:1b:29:
85:40:63:b5:bd:de:d6:8b:ab:31:ab:c3:29:c4:b1:
d5:7a:db:07:e1:0b:40:1c:1b:1f:2b:03:5b:5a:5d:
3e:5e:bd:75:6e:ed:35:5d:8c:7f:ab:6c:f2:05:8b:
6e:b5:4e:cf:07:50:65:66:24:19:ee:ae:82:a7:f7:
8b:84:b5:aa:96:ae:7a:5a:fb:07:97:c9:a4:e4:e4:
ea:55:01:13:b3:8f:b2:d2:6a:61:f4:9c:12:f1:92:
1f:79:81:f0:72:e8:53:92:ae:df:3c:68:57:b1:73:
d0:6e:fa:73:e3:bb:7e:08:01:31:62:52:44:52:16:
6c:dc:d3:df:df:b7:03:5c:3a:b2:00:2b:c2:e5:f9:
d2:13:7d:a1:76:b9:f5:64:2a:0e:d9:92:bd:23:95:
4a:07:aa:bc:cb:77:bb:d3:3f:65:ca:d9:90:7d:0b:
f4:d5:5b:64:d1:b3:9a:38:b9:26:02:66:40:d7:c6:
70:94:6b:e1:e4:b2:a3:b1:c4:d9:e7:04:9e:19:03:
6e:3c:11:bf:b2:89:2a:d7:4f:eb:b4:a5:4c:de:7c:
71:63:f9:3c:4c:30:a7:eb:11:2b:04:db:4e:7e:2e:
86:57:b2:39:d9:37:29:2b:e7:1e:fd:b0:b1:fe:0f:
23:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EC:56:0C:12:BC:C2:B9:73:2F:27:A7:F7:14:61:8A:C8:E4:97:97
X509v3 Authority Key Identifier:
keyid:8B:DD:14:26:7C:A0:9C:CA:07:98:7E:B2:48:FF:75:85:69:11:A4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i90UJnygnMoHmH6ySP91hWkRpHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/3c1fed-4546-4bff-80d1-99c741a3a312/1/i90UJnygnMoHmH6ySP91hWkRpHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/3c1fed-4546-4bff-80d1-99c741a3a312/1/i90UJnygnMoHmH6ySP91hWkRpHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:08:52:2e:35:d5:8d:3c:35:f1:45:c7:19:53:49:69:dc:c5:
c9:2e:0d:dc:87:c2:1e:fa:89:6c:a2:d4:2e:a7:86:5e:10:85:
cf:25:32:9f:3f:8b:51:de:85:4d:a3:d3:88:8e:11:6a:d7:01:
d3:ef:3b:ba:a2:80:01:ed:1c:a9:5c:05:57:e9:a4:63:30:3d:
f4:b2:84:07:cd:c9:48:1f:ad:be:d3:9a:ad:ef:bd:51:79:1f:
cd:97:08:4a:bb:f2:0b:a4:0f:6d:51:86:f7:50:f4:28:dc:17:
98:eb:91:4d:95:8a:89:ca:00:4a:e6:78:28:eb:84:07:44:d0:
36:78:f4:25:73:a1:bf:4f:d6:15:26:9c:33:78:14:20:7f:b7:
db:8b:ec:c1:78:fc:d9:0c:34:21:ff:9e:9b:a7:74:48:65:c8:
be:6b:f6:ec:c5:bd:ef:38:2f:10:2c:35:98:ea:b3:55:2f:c3:
19:05:09:9e:9f:57:b2:d2:ae:2d:8f:b3:67:99:af:bd:cb:93:
1a:21:99:c2:b8:98:4e:94:32:eb:ba:3b:68:cf:4f:0d:f3:4f:
6b:c2:33:97:0c:28:21:83:9a:c8:72:02:d0:a5:31:0e:19:e5:
a6:9b:2e:8c:5d:3b:21:8c:7b:eb:6b:3f:cc:3b:3a:6a:3f:df:
98:84:48:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:42:15 2025 by rpki-client